search

alexalouit / ISPConfig-letsencrypt

Let's Encrypt support for ISPConfig
68 stars 23 forks source link

Domain is not recognized #56

Closed nourbakhsh closed 8 years ago

nourbakhsh commented 8 years ago

Hi, thanks for your great work. I've installed cerbot auto and also ISPConfig-letsencrypt. Both seems to work but every time i try to create a cert in ISP Config it fails. There is an error in recognizing the Domain. /var/log/letsencrypt/letsencrypt.log looks like this: I've replace My Domain with . IP Adress is also correct so there is no Problem with DNS resolution. I could also create a cert by running certbot-auto

2016-07-28 14:50:06,106:DEBUG:certbot.main:Root logging level set at 30
2016-07-28 14:50:06,106:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2016-07-28 14:50:06,106:WARNING:certbot.cli:You are running with an old copy of letsencrypt-auto that does not receive updates, and is less reliable than more recent versions. We recommend upgrading to the latest certbot-auto script, or using native OS packages.
2016-07-28 14:50:06,107:DEBUG:certbot.main:certbot version: 0.8.1
2016-07-28 14:50:06,107:DEBUG:certbot.main:Arguments: ['-a', 'webroot', '--email', 'postmaster@<mydomain>.de', '--domains', '<mydomain>.de', '--domains', 'www.<mydomain>.de', '--webroot-path', '/var/www/clients/client1/web33/web']
2016-07-28 14:50:06,107:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2016-07-28 14:50:06,107:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2016-07-28 14:50:06,114:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot.plugins.webroot:Authenticator
Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f1b7e834790>
Prep: True
2016-07-28 14:50:06,115:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f1b7e834790> and installer None
2016-07-28 14:50:06,574:DEBUG:certbot.main:Picked account: <Account(93766f57480462df490123329a22e361)>
2016-07-28 14:50:06,575:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2016-07-28 14:50:06,622:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-07-28 14:50:06,842:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 280
2016-07-28 14:50:06,845:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '280', 'Expires': 'Thu, 28 Jul 2016 14:50:06 GMT', 'Boulder-Request-Id': 'VnR42pCM-drO1_krLH8geE9THgtWL1A0SYhP0dZ8d2g', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:06 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'LX5SKu5gozG17k3Qvv33RmSc68OhcxOXixTO9vTO35g'}. Content: '{\n  "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n  "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n  "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n  "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2016-07-28 14:50:06,845:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '280', 'Expires': 'Thu, 28 Jul 2016 14:50:06 GMT', 'Boulder-Request-Id': 'VnR42pCM-drO1_krLH8geE9THgtWL1A0SYhP0dZ8d2g', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:06 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'LX5SKu5gozG17k3Qvv33RmSc68OhcxOXixTO9vTO35g'}): '{\n  "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",\n  "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",\n  "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",\n  "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"\n}'
2016-07-28 14:50:06,918:DEBUG:root:Requesting fresh nonce
2016-07-28 14:50:06,918:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
2016-07-28 14:50:07,098:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
2016-07-28 14:50:07,100:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '91', 'Pragma': 'no-cache', 'Boulder-Request-Id': '8ONUg_F8LHfSnni9W4sID6BUoOUaWmq8L0b7i0dpPzw', 'Expires': 'Thu, 28 Jul 2016 14:50:07 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:07 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'QiIvn-KZdQCAyfJcMHziJw9-a2Xv4bh866pZxiycA3Y'}. Content: ''
2016-07-28 14:50:07,100:DEBUG:acme.client:Storing nonce: 'B"/\x9f\xe2\x99u\x00\x80\xc9\xf2\\0|\xe2\'\x0f~ke\xef\xe1\xb8|\xeb\xaaY\xc6,\x9c\x03v'
2016-07-28 14:50:07,101:DEBUG:acme.jose.json_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None
2016-07-28 14:50:07,101:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "<mydomain>.de"}, "resource": "new-authz"}
2016-07-28 14:50:07,102:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-07-28 14:50:07,106:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-07-28 14:50:07,107:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "s6cM5vur_0VkcMmWs4kEaoAosuTirJQ26Ga17gNOkP-gSgHXNiO22m_khAfzjqeQSN7Ae13_4FtcTo-MBiftOrWILg0KkTsWZ06BcFNVNnj_-L-KvyP-coB5kCZ1iiJpFDNcL14d_8yhtGzkYFbHT6ZEZ6Hbf2YOLlpa2VZpt1Qtv_9eXD4K3E9o0CmYr_L6fHWfGUvxTC_h76_D5ZagUoujB4o_K6D5NMdmBkQdG9OhOJQRygGRbWl45d4Okd34VBr4DGfWPtYTTfbc1fQf6_6VvNFKnWYkqGX4eG2kMw1LppF6Pm96gR4jgYPglrW6yQcKYNgIiTd7zoCZxnq3qQ"}}, "protected": "eyJub25jZSI6ICJRaUl2bi1LWmRRQ0F5ZkpjTUh6aUp3OS1hMlh2NGJoODY2cFp4aXljQTNZIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJsaXF1aWRyYXRpbmcuZGUifSwgInJlc291cmNlIjogIm5ldy1hdXRoeiJ9", "signature": "PIcrnPiQORViKUPR9P1S8OmWIoq2JS2byCw0t36BxSLL66c3TFtS7m2vmOZqzVijnfWJjW4x5LG6ZtE6yGo_hGHh9G5NRf8AAZGPqflLifdjc4NYGgJcg7vXvTNmzbUKj2z9z_aXdVVE5N88eB4JweUFdEOQfPjeZb2FAa8d4ItfaaOtJbZKJlLwniTWUuyAQHadmFMp6Wp7vCHbv_apCMensvSKl_s930zfbpkkidk5f-4DEJuIo2kDwKUZITXSscoh3vYpkFA5EfdRR5qdwTp0D_0qjkbcNRkaGe_J-GqKKMqLYNmkHs9jOR7YOOerFzBgrwI2UnOy9dVyBM7uoA"}'}
2016-07-28 14:50:08,025:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1000
2016-07-28 14:50:08,027:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '1000', 'Expires': 'Thu, 28 Jul 2016 14:50:08 GMT', 'Boulder-Request-Id': '3NNP-S4t7-kfuV0AQkQBfadCoDTwFLUSt33NxY9VJyg', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:08 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'daufgkftS8hGQUwotXo_XLLoD8GHtMoleY7gqgCJXuQ'}. Content: '{\n  "identifier": {\n    "type": "dns",\n    "value": "<mydomain>.de"\n  },\n  "status": "pending",\n  "expires": "2016-08-04T14:50:07.511787162Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929163",\n      "token": "blT_V5U_nGs3BplDqnfIhFNq6SfmjK86ucQgpsWzDrA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929167",\n      "token": "BQ-mGSQPKWmYg3tS8ekNWM7DqG33sQrcav_m438pkpw"\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171",\n      "token": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:08,027:DEBUG:acme.client:Storing nonce: 'u\xab\x9f\x82G\xedK\xc8FAL(\xb5z?\\\xb2\xe8\x0f\xc1\x87\xb4\xca%y\x8e\xe0\xaa\x00\x89^\xe4'
2016-07-28 14:50:08,027:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '1000', 'Expires': 'Thu, 28 Jul 2016 14:50:08 GMT', 'Boulder-Request-Id': '3NNP-S4t7-kfuV0AQkQBfadCoDTwFLUSt33NxY9VJyg', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:08 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'daufgkftS8hGQUwotXo_XLLoD8GHtMoleY7gqgCJXuQ'}): '{\n  "identifier": {\n    "type": "dns",\n    "value": "<mydomain>.de"\n  },\n  "status": "pending",\n  "expires": "2016-08-04T14:50:07.511787162Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929163",\n      "token": "blT_V5U_nGs3BplDqnfIhFNq6SfmjK86ucQgpsWzDrA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929167",\n      "token": "BQ-mGSQPKWmYg3tS8ekNWM7DqG33sQrcav_m438pkpw"\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171",\n      "token": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:08,029:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'blT_V5U_nGs3BplDqnfIhFNq6SfmjK86ucQgpsWzDrA', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929163'}
2016-07-28 14:50:08,030:DEBUG:acme.jose.json_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None
2016-07-28 14:50:08,031:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "www.<mydomain>.de"}, "resource": "new-authz"}
2016-07-28 14:50:08,033:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-07-28 14:50:08,036:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-07-28 14:50:08,036:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "s6cM5vur_0VkcMmWs4kEaoAosuTirJQ26Ga17gNOkP-gSgHXNiO22m_khAfzjqeQSN7Ae13_4FtcTo-MBiftOrWILg0KkTsWZ06BcFNVNnj_-L-KvyP-coB5kCZ1iiJpFDNcL14d_8yhtGzkYFbHT6ZEZ6Hbf2YOLlpa2VZpt1Qtv_9eXD4K3E9o0CmYr_L6fHWfGUvxTC_h76_D5ZagUoujB4o_K6D5NMdmBkQdG9OhOJQRygGRbWl45d4Okd34VBr4DGfWPtYTTfbc1fQf6_6VvNFKnWYkqGX4eG2kMw1LppF6Pm96gR4jgYPglrW6yQcKYNgIiTd7zoCZxnq3qQ"}}, "protected": "eyJub25jZSI6ICJkYXVmZ2tmdFM4aEdRVXdvdFhvX1hMTG9EOEdIdE1vbGVZN2dxZ0NKWHVRIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJ3d3cubGlxdWlkcmF0aW5nLmRlIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ", "signature": "BW-S7UmK81zDc_k7Cl8rV5ov8sF5Nb-MYK2z-9y5J9Q5rs1vK4I54kv0BxHBH1r4NUi7mNKgjRk1OY-7zZyz7FBGzcMJSyJ712Uh0KTLMahRXWH0mSNUIwYDEmytOyuLL1pGNM3pJ7E4_49WA0ZxaWFVRYUcXrjMpqLaPveJqTG_iqr7FPEOfpuAjSLvkbYYMsuyWG0nu8KTSDTqNzMYU38NoXpMDFtrPc2KvrxcQwlVqmChBprAbnPGgKjLBnk7L5-OzHyN18BQ_xid-I2H0Kch9jtKa7LREYfImIFvWEYWk0ktHXZ8KZL2lMNbWwIaIk3NmUDC3aWqHNGS_npfTQ"}'}
2016-07-28 14:50:08,574:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1004
2016-07-28 14:50:08,576:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '1004', 'Expires': 'Thu, 28 Jul 2016 14:50:08 GMT', 'Boulder-Request-Id': 'ExYS6Rp4nsnRxFQGqXd0mNZKkUu5uwtx8k6a0ejiL5k', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:08 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'Y1Ntgv5LiDQCIJwiyZ4TpIgXIl5VLjQGT3LWjMwOixI'}. Content: '{\n  "identifier": {\n    "type": "dns",\n    "value": "www.<mydomain>.de"\n  },\n  "status": "pending",\n  "expires": "2016-08-04T14:50:08.211268148Z",\n  "challenges": [\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929203",\n      "token": "4czhu8JzXnO_7vyE1e-2VzwGhICt1RXrpiGA0d7hawk"\n    },\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929205",\n      "token": "kBzLY7x9CCisgI6_aPmIF7GdPHul_L-fVB6R-AnDuYM"\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207",\n      "token": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:08,577:DEBUG:acme.client:Storing nonce: 'cSm\x82\xfeK\x884\x02 \x9c"\xc9\x9e\x13\xa4\x88\x17"^U.4\x06Or\xd6\x8c\xcc\x0e\x8b\x12'
2016-07-28 14:50:08,577:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '1004', 'Expires': 'Thu, 28 Jul 2016 14:50:08 GMT', 'Boulder-Request-Id': 'ExYS6Rp4nsnRxFQGqXd0mNZKkUu5uwtx8k6a0ejiL5k', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:08 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'Y1Ntgv5LiDQCIJwiyZ4TpIgXIl5VLjQGT3LWjMwOixI'}): '{\n  "identifier": {\n    "type": "dns",\n    "value": "www.<mydomain>.de"\n  },\n  "status": "pending",\n  "expires": "2016-08-04T14:50:08.211268148Z",\n  "challenges": [\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929203",\n      "token": "4czhu8JzXnO_7vyE1e-2VzwGhICt1RXrpiGA0d7hawk"\n    },\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929205",\n      "token": "kBzLY7x9CCisgI6_aPmIF7GdPHul_L-fVB6R-AnDuYM"\n    },\n    {\n      "type": "http-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207",\n      "token": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY"\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:08,579:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'kBzLY7x9CCisgI6_aPmIF7GdPHul_L-fVB6R-AnDuYM', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929205'}
2016-07-28 14:50:08,581:INFO:certbot.auth_handler:Performing the following challenges:
2016-07-28 14:50:08,581:INFO:certbot.auth_handler:http-01 challenge for <mydomain>.de
2016-07-28 14:50:08,582:INFO:certbot.auth_handler:http-01 challenge for www.<mydomain>.de
2016-07-28 14:50:08,582:INFO:certbot.plugins.webroot:Using the webroot path /var/www/clients/client1/web33/web for all unmatched domains.
2016-07-28 14:50:08,582:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /var/www/clients/client1/web33/web/.well-known/acme-challenge
2016-07-28 14:50:08,583:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /var/www/clients/client1/web33/web/.well-known/acme-challenge
2016-07-28 14:50:08,591:DEBUG:certbot.plugins.webroot:Attempting to save validation to /var/www/clients/client1/web33/web/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U
2016-07-28 14:50:08,596:DEBUG:certbot.plugins.webroot:Attempting to save validation to /var/www/clients/client1/web33/web/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY
2016-07-28 14:50:08,597:INFO:certbot.auth_handler:Waiting for verification...
2016-07-28 14:50:08,597:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg", "type": "http-01", "resource": "challenge"}
2016-07-28 14:50:08,599:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-07-28 14:50:08,603:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-07-28 14:50:08,604:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "s6cM5vur_0VkcMmWs4kEaoAosuTirJQ26Ga17gNOkP-gSgHXNiO22m_khAfzjqeQSN7Ae13_4FtcTo-MBiftOrWILg0KkTsWZ06BcFNVNnj_-L-KvyP-coB5kCZ1iiJpFDNcL14d_8yhtGzkYFbHT6ZEZ6Hbf2YOLlpa2VZpt1Qtv_9eXD4K3E9o0CmYr_L6fHWfGUvxTC_h76_D5ZagUoujB4o_K6D5NMdmBkQdG9OhOJQRygGRbWl45d4Okd34VBr4DGfWPtYTTfbc1fQf6_6VvNFKnWYkqGX4eG2kMw1LppF6Pm96gR4jgYPglrW6yQcKYNgIiTd7zoCZxnq3qQ"}}, "protected": "eyJub25jZSI6ICJZMU50Z3Y1TGlEUUNJSndpeVo0VHBJZ1hJbDVWTGpRR1QzTFdqTXdPaXhJIn0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogImtzRGJWbFU2V05xT1hRZ3paclpOa19CRUlOU0xOMEF6N2hNcmt5UmlwNlUucEgzeFFnYmNDQlVPQ1ZaQk80OWFqZTlHVWFkR2w0NFVxb19kRDdhcFN4ZyIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "S8phZF5OrAQ2NiZewHeCc4BSoNZTMBj7wYlIjgpoURWyCsrBq51I6W0ddvQ6WRF0f8KKYBlPyfCDxtpWKCBrv92NwHrlvMang159rXdpmds-8LMU0OcleBsthswz_KAwLDHWXLogBkziG1Mos88O5N_wh7TI_g9ROb4gSHd4mY6MIU52n3ybgCo54p64ljy9KGtGaDu2ireUoZ3kZztCzIJzVlrCbi53OAc01s3unsD_eptaJnnY5wyttMLSplXU0Rbfce3C7GFvJpmQC2o3qsrJ70WechHsaQ0OCxfR0WjrcMJDOR87cjCOQUKb51q8atnQ4N9fwHG4zV2wT_mVEQ"}'}
2016-07-28 14:50:09,304:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171 HTTP/1.1" 202 335
2016-07-28 14:50:09,305:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '335', 'Boulder-Request-Id': 'eBUzX7fqzq_tEI8OezpXAX6fuKofTBenqAVNM42k6Us', 'Expires': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'QfqLCpE1o-yt4ZK2Ycgy4y6y_41SbrF0T4hLOcrDz0I'}. Content: '{\n  "type": "http-01",\n  "status": "pending",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171",\n  "token": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U",\n  "keyAuthorization": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg"\n}'
2016-07-28 14:50:09,305:DEBUG:acme.client:Storing nonce: 'A\xfa\x8b\n\x915\xa3\xec\xad\xe1\x92\xb6a\xc82\xe3.\xb2\xff\x8dRn\xb1tO\x88K9\xca\xc3\xcfB'
2016-07-28 14:50:09,305:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '335', 'Boulder-Request-Id': 'eBUzX7fqzq_tEI8OezpXAX6fuKofTBenqAVNM42k6Us', 'Expires': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'QfqLCpE1o-yt4ZK2Ycgy4y6y_41SbrF0T4hLOcrDz0I'}): '{\n  "type": "http-01",\n  "status": "pending",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171",\n  "token": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U",\n  "keyAuthorization": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg"\n}'
2016-07-28 14:50:09,306:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg", "type": "http-01", "resource": "challenge"}
2016-07-28 14:50:09,307:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-07-28 14:50:09,310:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-07-28 14:50:09,311:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "s6cM5vur_0VkcMmWs4kEaoAosuTirJQ26Ga17gNOkP-gSgHXNiO22m_khAfzjqeQSN7Ae13_4FtcTo-MBiftOrWILg0KkTsWZ06BcFNVNnj_-L-KvyP-coB5kCZ1iiJpFDNcL14d_8yhtGzkYFbHT6ZEZ6Hbf2YOLlpa2VZpt1Qtv_9eXD4K3E9o0CmYr_L6fHWfGUvxTC_h76_D5ZagUoujB4o_K6D5NMdmBkQdG9OhOJQRygGRbWl45d4Okd34VBr4DGfWPtYTTfbc1fQf6_6VvNFKnWYkqGX4eG2kMw1LppF6Pm96gR4jgYPglrW6yQcKYNgIiTd7zoCZxnq3qQ"}}, "protected": "eyJub25jZSI6ICJRZnFMQ3BFMW8teXQ0WksyWWNneTR5NnlfNDFTYnJGMFQ0aExPY3JEejBJIn0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogIjk1anlBSnJxNUVGMm9UZWNVZGYxVV9lTE5NN3RJR243QVVSWkFrMHRqQlkucEgzeFFnYmNDQlVPQ1ZaQk80OWFqZTlHVWFkR2w0NFVxb19kRDdhcFN4ZyIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "Zh7p3xBTHJeaDEsJ34VPv72YHDoLdjXsKk0AsHn0maOCUzlzKUetCsY9p1dIjqrUdFO6leag_g0Rrdrebu3s3E6CNT6GOhqxGGgXLHSRqsEGASpodyKdqJRxj1hhKdKRZ5M3zpjQ---FgNV9c5VTV1fMOxowjfkBzMKW6UMmh1pdLrfOmRF_-CiJA5c5Yffa8j_0s8pkqSb9xJjndUJj5XCIXcssw3ugUe0n2CPq6z53FaoysUzhwlEz3in9wc0BgBbQlff0MOuL2n9a0hmXy4yMYom6zzd6jmOWi-TMrypfGqepUGh2VtiWe0La-U6UtvcPi5RHl2yEesbgELk0iw"}'}
2016-07-28 14:50:09,559:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207 HTTP/1.1" 202 335
2016-07-28 14:50:09,560:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '335', 'Boulder-Request-Id': 'w2ET1aLlAfgB4od2g5M0LAN4rOPdwIHyS5BI2vSvsZw', 'Expires': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'UqSooCF97T1uBi-98zFPE3yykcIYw38HziKMH6X6Lf8'}. Content: '{\n  "type": "http-01",\n  "status": "pending",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207",\n  "token": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY",\n  "keyAuthorization": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg"\n}'
2016-07-28 14:50:09,560:DEBUG:acme.client:Storing nonce: 'R\xa4\xa8\xa0!}\xed=n\x06/\xbd\xf31O\x13|\xb2\x91\xc2\x18\xc3\x7f\x07\xce"\x8c\x1f\xa5\xfa-\xff'
2016-07-28 14:50:09,560:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '335', 'Boulder-Request-Id': 'w2ET1aLlAfgB4od2g5M0LAN4rOPdwIHyS5BI2vSvsZw', 'Expires': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Server': 'nginx', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207', 'Pragma': 'no-cache', 'Boulder-Requester': '2739174', 'Date': 'Thu, 28 Jul 2016 14:50:09 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'UqSooCF97T1uBi-98zFPE3yykcIYw38HziKMH6X6Lf8'}): '{\n  "type": "http-01",\n  "status": "pending",\n  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207",\n  "token": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY",\n  "keyAuthorization": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg"\n}'
2016-07-28 14:50:12,564:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8. args: (), kwargs: {}
2016-07-28 14:50:12,757:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8 HTTP/1.1" 200 1861
2016-07-28 14:50:12,758:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1861', 'Expires': 'Thu, 28 Jul 2016 14:50:12 GMT', 'Boulder-Request-Id': 'A24Vb27flBn5lqax2FqWVJYKgT8j-Nm5_WC5YAavvUY', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:12 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'bA1maYhOJ2o7wtse5bPfc0qdJA_wZz99GH6msxlYc20'}. Content: '{\n  "identifier": {\n    "type": "dns",\n    "value": "www.<mydomain>.de"\n  },\n  "status": "invalid",\n  "expires": "2016-08-04T14:50:08Z",\n  "challenges": [\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929203",\n      "token": "4czhu8JzXnO_7vyE1e-2VzwGhICt1RXrpiGA0d7hawk"\n    },\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929205",\n      "token": "kBzLY7x9CCisgI6_aPmIF7GdPHul_L-fVB6R-AnDuYM"\n    },\n    {\n      "type": "http-01",\n      "status": "invalid",\n      "error": {\n        "type": "urn:acme:error:unauthorized",\n        "detail": "Invalid response from http://www.<mydomain>.de/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY: \\"\\u003c!DOCTYPE html PUBLIC \\"-//W3C//DTD XHTML 1.0 Transitional//EN\\"\\n   \\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\\"\\u003e\\n\\u003cht\\"",\n        "status": 403\n      },\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207",\n      "token": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY",\n      "keyAuthorization": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg",\n      "validationRecord": [\n        {\n          "url": "http://www.<mydomain>.de/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY",\n          "hostname": "www.<mydomain>.de",\n          "port": "80",\n          "addressesResolved": [\n            "46.38.241.213"\n          ],\n          "addressUsed": "46.38.241.213"\n        }\n      ]\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:12,759:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1861', 'Expires': 'Thu, 28 Jul 2016 14:50:12 GMT', 'Boulder-Request-Id': 'A24Vb27flBn5lqax2FqWVJYKgT8j-Nm5_WC5YAavvUY', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:12 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'bA1maYhOJ2o7wtse5bPfc0qdJA_wZz99GH6msxlYc20'}): '{\n  "identifier": {\n    "type": "dns",\n    "value": "www.<mydomain>.de"\n  },\n  "status": "invalid",\n  "expires": "2016-08-04T14:50:08Z",\n  "challenges": [\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929203",\n      "token": "4czhu8JzXnO_7vyE1e-2VzwGhICt1RXrpiGA0d7hawk"\n    },\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929205",\n      "token": "kBzLY7x9CCisgI6_aPmIF7GdPHul_L-fVB6R-AnDuYM"\n    },\n    {\n      "type": "http-01",\n      "status": "invalid",\n      "error": {\n        "type": "urn:acme:error:unauthorized",\n        "detail": "Invalid response from http://www.<mydomain>.de/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY: \\"\\u003c!DOCTYPE html PUBLIC \\"-//W3C//DTD XHTML 1.0 Transitional//EN\\"\\n   \\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\\"\\u003e\\n\\u003cht\\"",\n        "status": 403\n      },\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929207",\n      "token": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY",\n      "keyAuthorization": "95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg",\n      "validationRecord": [\n        {\n          "url": "http://www.<mydomain>.de/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY",\n          "hostname": "www.<mydomain>.de",\n          "port": "80",\n          "addressesResolved": [\n            "46.38.241.213"\n          ],\n          "addressUsed": "46.38.241.213"\n        }\n      ]\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:12,760:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'kBzLY7x9CCisgI6_aPmIF7GdPHul_L-fVB6R-AnDuYM', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/TupehswyfUC9xAk-ujTY4eqiV8iucfq9pD9s-Q26do8/201929205'}
2016-07-28 14:50:12,760:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI. args: (), kwargs: {}
2016-07-28 14:50:12,948:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI HTTP/1.1" 200 1845
2016-07-28 14:50:12,949:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1845', 'Expires': 'Thu, 28 Jul 2016 14:50:12 GMT', 'Boulder-Request-Id': 'dPJLFZveInbf4lAfOkMPLbP4Mo09mjJnAvCOxUW5ugc', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:12 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'NEdktqxkVmwPGIVPejgmxB_q4CqelJ-T0uRBTa-doiM'}. Content: '{\n  "identifier": {\n    "type": "dns",\n    "value": "<mydomain>.de"\n  },\n  "status": "invalid",\n  "expires": "2016-08-04T14:50:07Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929163",\n      "token": "blT_V5U_nGs3BplDqnfIhFNq6SfmjK86ucQgpsWzDrA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929167",\n      "token": "BQ-mGSQPKWmYg3tS8ekNWM7DqG33sQrcav_m438pkpw"\n    },\n    {\n      "type": "http-01",\n      "status": "invalid",\n      "error": {\n        "type": "urn:acme:error:unauthorized",\n        "detail": "Invalid response from http://<mydomain>.de/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U: \\"\\u003c!DOCTYPE html PUBLIC \\"-//W3C//DTD XHTML 1.0 Transitional//EN\\"\\n   \\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\\"\\u003e\\n\\u003cht\\"",\n        "status": 403\n      },\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171",\n      "token": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U",\n      "keyAuthorization": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg",\n      "validationRecord": [\n        {\n          "url": "http://<mydomain>.de/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U",\n          "hostname": "<mydomain>.de",\n          "port": "80",\n          "addressesResolved": [\n            "46.38.241.213"\n          ],\n          "addressUsed": "46.38.241.213"\n        }\n      ]\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:12,950:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1845', 'Expires': 'Thu, 28 Jul 2016 14:50:12 GMT', 'Boulder-Request-Id': 'dPJLFZveInbf4lAfOkMPLbP4Mo09mjJnAvCOxUW5ugc', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Thu, 28 Jul 2016 14:50:12 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'NEdktqxkVmwPGIVPejgmxB_q4CqelJ-T0uRBTa-doiM'}): '{\n  "identifier": {\n    "type": "dns",\n    "value": "<mydomain>.de"\n  },\n  "status": "invalid",\n  "expires": "2016-08-04T14:50:07Z",\n  "challenges": [\n    {\n      "type": "dns-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929163",\n      "token": "blT_V5U_nGs3BplDqnfIhFNq6SfmjK86ucQgpsWzDrA"\n    },\n    {\n      "type": "tls-sni-01",\n      "status": "pending",\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929167",\n      "token": "BQ-mGSQPKWmYg3tS8ekNWM7DqG33sQrcav_m438pkpw"\n    },\n    {\n      "type": "http-01",\n      "status": "invalid",\n      "error": {\n        "type": "urn:acme:error:unauthorized",\n        "detail": "Invalid response from http://<mydomain>.de/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U: \\"\\u003c!DOCTYPE html PUBLIC \\"-//W3C//DTD XHTML 1.0 Transitional//EN\\"\\n   \\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\\"\\u003e\\n\\u003cht\\"",\n        "status": 403\n      },\n      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929171",\n      "token": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U",\n      "keyAuthorization": "ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U.pH3xQgbcCBUOCVZBO49aje9GUadGl44Uqo_dD7apSxg",\n      "validationRecord": [\n        {\n          "url": "http://<mydomain>.de/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U",\n          "hostname": "<mydomain>.de",\n          "port": "80",\n          "addressesResolved": [\n            "46.38.241.213"\n          ],\n          "addressUsed": "46.38.241.213"\n        }\n      ]\n    }\n  ],\n  "combinations": [\n    [\n      2\n    ],\n    [\n      0\n    ],\n    [\n      1\n    ]\n  ]\n}'
2016-07-28 14:50:12,950:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'blT_V5U_nGs3BplDqnfIhFNq6SfmjK86ucQgpsWzDrA', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/D4DZg6kTkTR-bxzlUZB_Vf3BbOV6fh8sxnESzdD1hSI/201929163'}
2016-07-28 14:50:12,952:INFO:certbot.reporter:Reporting to user: The following errors were reported by the server:

Domain: <mydomain>.de
Type:   unauthorized
Detail: Invalid response from http://<mydomain>.de/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht"

Domain: www.<mydomain>.de
Type:   unauthorized
Detail: Invalid response from http://www.<mydomain>.de/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht"

To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address.
2016-07-28 14:50:12,952:INFO:certbot.auth_handler:Cleaning up challenges
2016-07-28 14:50:12,952:DEBUG:certbot.plugins.webroot:Removing /var/www/clients/client1/web33/web/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U
2016-07-28 14:50:12,952:DEBUG:certbot.plugins.webroot:Removing /var/www/clients/client1/web33/web/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY
2016-07-28 14:50:12,953:DEBUG:certbot.plugins.webroot:All challenges cleaned up, removing /var/www/clients/client1/web33/web/.well-known/acme-challenge
2016-07-28 14:50:12,957:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
  File "/root/.local/share/letsencrypt/bin/letsencrypt", line 11, in <module>
    sys.exit(main())
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 744, in main
    return config.func(config, plugins)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 555, in obtain_cert
    _, action = _auth_from_domains(le_client, config, domains, lineage)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 94, in _auth_from_domains
    lineage = le_client.obtain_and_enroll_certificate(domains)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 276, in obtain_and_enroll_certificate
    certr, chain, key, _ = self.obtain_certificate(domains)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 247, in obtain_certificate
    self.config.allow_subset_of_names)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 74, in get_authorizations
    self._respond(resp, best_effort)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 131, in _respond
    self._poll_challenges(chall_update, best_effort)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 195, in _poll_challenges
    raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. <mydomain>.de (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://<mydomain>.de/.well-known/acme-challenge/ksDbVlU6WNqOXQgzZrZNk_BEINSLN0Az7hMrkyRip6U: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht", www.<mydomain>.de (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.<mydomain>.de/.well-known/acme-challenge/95jyAJrq5EF2oTecUdf1U_eLNM7tIGn7AURZAk0tjBY: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht"
alexalouit commented 8 years ago

Hi! From what I read, server is running nginx? Nginx configuration (/etc/nginx/nginx.conf:5) have been patch correctly?

Also, check nginx directives under ISPConfig website section, Some configurations, like wordpress doesn't allow reading hidden (dot-files) files by default.

Can you paste it? Anything in nginx log?

nourbakhsh commented 8 years ago

Hi thanks for your Answer. It's a Apache Server. Ngnix is running on the lets encrypt Server.

You are right it was from the Drupal Configuration which doesn't allow to read hidden directories.

If someone else having the same issue. You have to Comment out this line from the .htaccess file.

#RewriteRule** "(^|/)\." - [F]